Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3137302e38302e3135342e302f32342d3234203d3e20323632373635.roa
File:                     3137302e38302e3135342e302f32342d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          Diui8kRMq5eIQJMwKGODySBvoOX1DH6ZpAur4aNUNcY=
Subject key identifier:   51:B8:6F:0E:02:A6:D4:22:4C:52:90:4E:C6:41:25:15:44:88:F4:97
Certificate issuer:       /CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
Certificate serial:       378AE75322CDDBEC4745D714C0C5893F0C382B15
Authority key identifier: 77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3137302e38302e3135342e302f32342d3234203d3e20323632373635.roa
Signing time:             Wed 22 Oct 2025 20:48:46 +0000
ROA not before:           Wed 22 Oct 2025 20:43:46 +0000
ROA not after:            Wed 21 Oct 2026 20:48:46 +0000
asID:                     262765
IP address blocks:        170.80.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8a:e7:53:22:cd:db:ec:47:45:d7:14:c0:c5:89:3f:0c:38:2b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
        Validity
            Not Before: Oct 22 20:43:46 2025 GMT
            Not After : Oct 21 20:48:46 2026 GMT
        Subject: CN=51B86F0E02A6D4224C52904EC64125154488F497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9c:c5:de:1b:03:ac:45:1d:81:2f:fd:0d:49:
                    d3:fa:43:c1:11:65:5c:68:1d:f2:0a:f6:4a:28:9b:
                    85:18:d9:69:7d:d8:da:6e:55:05:69:c4:43:c6:58:
                    e5:b0:ae:97:2e:cb:aa:73:19:ab:53:45:7f:00:06:
                    d1:3a:2d:32:ad:25:05:01:00:29:72:29:45:ad:a7:
                    c6:3c:3f:23:79:39:d2:87:b2:17:91:ac:6a:aa:c4:
                    0c:33:52:a1:77:48:41:dc:03:d5:7e:96:52:fb:8a:
                    67:8a:b8:41:8c:7f:60:d4:c3:80:1b:f9:a4:0a:45:
                    d2:6c:4b:1a:85:28:f0:ad:1b:d8:45:42:b8:4d:0d:
                    df:2c:b5:fe:09:37:0b:aa:67:4c:11:40:06:c9:f8:
                    1e:45:dc:3e:8b:6a:c5:7c:5a:45:02:75:3a:23:66:
                    37:50:44:b0:b0:30:24:c2:a8:85:cb:3b:8e:04:b0:
                    c1:44:34:9f:30:68:43:76:b1:18:1a:bc:8a:ea:38:
                    af:a6:0d:7e:80:83:72:1a:eb:0d:85:fb:79:a6:ec:
                    d7:ed:7c:23:a2:68:f6:40:9f:c4:2a:3e:d0:d3:7c:
                    f6:40:13:3e:8e:96:c0:67:54:14:21:41:36:a7:16:
                    53:eb:ce:06:11:8c:cc:37:d4:54:12:24:be:ed:20:
                    99:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B8:6F:0E:02:A6:D4:22:4C:52:90:4E:C6:41:25:15:44:88:F4:97
            X509v3 Authority Key Identifier:
                keyid:77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3137302e38302e3135342e302f32342d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:41:c6:ce:9d:1a:0e:a3:cf:3e:d5:d0:e8:be:e3:a8:b8:cb:
         30:6d:4a:34:dd:c2:1b:62:fd:57:86:36:9e:88:a6:13:bc:87:
         af:98:c2:c5:42:0e:ac:49:ea:da:1d:74:7a:8f:37:94:d5:d5:
         d5:94:5b:b9:59:9b:a7:e9:e7:8c:93:e4:b1:b5:09:0c:5b:50:
         95:73:92:fe:79:08:b5:89:ee:f9:dc:85:24:ba:38:cd:1e:fd:
         23:e0:c3:e2:2a:ab:37:7d:65:da:eb:ae:ec:2f:2a:e0:b2:da:
         a6:3c:4c:46:98:15:c8:57:b4:c1:9b:c0:86:93:d9:24:03:fb:
         aa:9f:d8:18:8c:4e:a6:6b:79:6a:b0:ab:9e:1d:f5:ed:83:14:
         c2:ce:64:3f:d7:74:36:80:1a:f8:77:cb:24:2a:65:c9:24:8e:
         9f:97:35:3b:e3:66:69:b2:81:01:47:99:70:d5:6b:a3:a8:7d:
         82:f8:2f:7d:9e:67:28:4b:08:19:76:9a:b9:bf:11:1b:b3:3f:
         1f:d3:a3:be:29:e5:74:5c:44:40:93:e2:e5:2a:b8:67:c6:45:
         64:62:26:bf:f3:53:ba:c5:fa:d5:9d:5c:d5:d9:0d:80:9f:94:
         e3:4b:86:1d:1c:8f:0b:23:62:98:99:ae:91:d3:f7:59:95:e1:
         7e:29:72:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:35:31 2025 by rpki-client